Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/EKSkbPd_KypUe2n5hwfsYoelrnw.roa
File: EKSkbPd_KypUe2n5hwfsYoelrnw.roa (raw, json)
Hash identifier: lFzs7CVghErLoOYD9KthTXl3pfB2pZkKLRctRj8wzcY=
Subject key identifier: 10:A4:A4:6C:F7:7F:2B:2A:54:7B:69:F9:87:07:EC:62:87:A5:AE:7C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 78DC
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EKSkbPd_KypUe2n5hwfsYoelrnw.roa
Signing time: Sat 19 Jul 2025 15:12:11 +0000
ROA not before: Sat 19 Jul 2025 15:12:11 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30940 (0x78dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jul 19 15:12:11 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=10A4A46CF77F2B2A547B69F98707EC6287A5AE7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f8:54:12:58:bf:60:fa:28:14:62:fa:07:a3:
9e:e5:47:2b:b2:66:ff:e6:b9:e8:33:3e:08:43:e6:
11:55:a6:91:f9:b5:5a:6a:f6:11:39:f3:44:e2:e8:
ab:e7:1e:84:be:c2:e4:9a:a0:88:2d:ab:84:3f:17:
0b:e5:d6:ff:ae:da:70:5e:82:be:a5:4b:24:70:94:
27:23:73:4c:da:35:a2:df:87:ad:c7:c3:95:0d:14:
8d:dd:b4:24:af:98:ec:aa:5d:1a:2e:11:a7:a9:3b:
5a:85:6f:c0:8f:93:d8:30:dd:0f:5a:fa:29:4e:d4:
de:0b:a6:92:87:08:23:aa:d7:7e:f6:60:86:13:75:
0d:d0:f2:33:55:2a:cc:26:fd:5d:8e:73:7b:7a:56:
b4:cb:c5:d4:13:2c:18:be:4b:4e:48:b9:8a:16:3f:
e6:a4:0e:d5:d2:e2:6f:41:60:2c:8f:3c:a2:26:7e:
e9:e0:bc:e3:71:35:91:25:1b:bb:ed:42:23:e2:70:
f0:38:c2:50:9e:02:5e:b6:9e:d2:ea:ff:ae:d5:2d:
93:47:6a:c7:ab:68:eb:f5:95:04:f5:15:a3:41:80:
52:d1:19:99:59:3b:61:bc:99:e6:94:c2:93:b1:ae:
25:a2:3f:58:e3:d5:42:1e:53:c3:80:bd:88:7e:03:
cb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A4:A4:6C:F7:7F:2B:2A:54:7B:69:F9:87:07:EC:62:87:A5:AE:7C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/EKSkbPd_KypUe2n5hwfsYoelrnw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
51:59:bb:cc:33:d6:2e:e6:fd:c1:51:be:c2:09:9c:01:13:f2:
8b:65:d0:15:a1:63:2a:26:d0:c6:a1:f3:7e:da:a0:19:d0:78:
87:cc:01:b0:97:17:d2:97:17:84:2e:e7:9a:8f:ab:65:8f:37:
16:d3:58:0c:ac:f2:58:09:21:ed:ad:80:7a:c1:17:c1:9f:07:
39:f4:92:de:3d:02:e3:b9:48:50:55:30:d2:57:76:a4:d2:7e:
05:2c:b2:94:97:a6:d9:6f:24:55:fd:68:fe:39:7c:b2:2b:e9:
ad:04:aa:75:97:e2:0a:9f:21:c6:8b:b6:db:45:40:d9:8e:73:
97:7d:5a:aa:04:ed:6e:56:45:73:82:c5:9a:f5:21:e2:88:39:
58:bb:84:f1:e3:3f:5c:b4:2e:0a:17:11:b0:78:db:30:cf:50:
cb:d7:53:7d:59:23:fb:5b:88:b7:ec:39:4b:d8:9a:ba:0c:16:
ba:b7:28:fa:0f:55:33:16:11:ea:55:f4:11:69:a2:f8:a5:0e:
bd:62:7b:64:dc:5b:8f:bc:f8:6e:4d:7b:60:c0:14:97:49:f2:
fa:9f:23:32:ab:8a:3b:ab:70:81:54:e9:8d:b1:b3:58:dd:67:
3b:37:d6:b1:57:85:48:99:df:99:05:17:68:f4:5e:f6:1b:81:
72:8d:9a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:44 2025 by rpki-client